Summary
[1:1.2-5.el7]
- Update spec file to remove 'modprobe kvm-intel' and remove --enable-kvm arg to ovmf_vars_generator so qemu will not require kvm kernel module. (Aaron Young)
- Update spec file to modprobe kvm_intel module prior to running qemu to enroll default keys. (Aaron Young)
- Enroll Oracle cert/key for OL secureboot support. (Aaron Young)
[1:1.2-2.el7]
- Change Image.c image load error to DEBUG_WARN from DEBUG_ERROR since it is normal for some images to fail to load if the associated hardware is not present. Such is the case with Ramfb. (Aaron Young) [Orabug: 28868674]
- Fix AAVMF build. Pull in OpenSSL code (as is done for x86_64) (Aaron Young)
- Update AAVMF change log for version 1.2 (Aaron Young)
[1:1.2-1.el7]
- Update spec files and OVMF change log to version 1.2
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | OVMF | 1:1.2-5.el7 |
Vulnerabilities 11
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…
-
Unscored —
Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escal…
-
Unscored —CVE-2017-5732 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…
-
Unscored —CVE-2017-5733 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…
-
Unscored —CVE-2017-5734 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
-
Unscored —CVE-2017-5735 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…
-
Unscored —
Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege a…
-
Unscored —
Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of pri…
-
Unscored —
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or eleva…
-
Unscored —CVE-2018-3630 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…